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(54) Method and apparatus for preventing illegal use of multimedia content 

(57) The invention proposes a method to manage 
the rights associated to a multimedia content item (like 
digital music, video or software) in order to satisfy both 
the legitimate rights of the content author or rights 
owner and the legitimate user of such content. In the 
time of mass storage devices that can be used as media 
servers, this requires easy ways to move content as well 
as the rights to use it, the usage license. Moving the 
rights to a new location implies that the item at its new 
location is now the legitimate original version that may 
be played back or from which (for example) one further 
copy may be derived. In a simple embodiment, this can 
be accomplished by swapping the value of a flag indi- 
cating original or copy between the previous original 
and the new version of the item. In future digital systems 
with encrypted or partially encrypted content, this can 
be accomplished as well by a descriptor that describes 
the rights associated to a multimedia content item and a 
location-specific decryption key associated to it. Advan- 
tageously, the original multimedia content item need not 
be deleted from the primary mass storage device, or 
media server, allowing for a temporary lease of play 
back rights to secondary, possibly mobile devices. 
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Description 

[0001] The invention relates to a method for pre- 
venting illegal content copies of multimedia content 
while preserving sufficient flexibility for the legitimate 5 
content user. 

Background 

[0002] Current digital media like DAT and MiniDisk io 

include a mechanism that prevents the generation of 
multiple digital copies of a content item. In that case, 
only one digital copy is authorized. With future digital 
multimedia systems, copy protection will become more 
sophisticated and even more enforcable. 15 
This may have the disadvantage that the legitimate user 
cannot freely move the content between different stor- 
age media (i.e., disks, tapes) since such a move implies 
that the content item is considered as "copied". Therefor 
further copies become illegal and will be prohibited by 20 
the device. 

[0003] If copies from digital multimedia sources are 
not made digitally but in the analog domain, copying is 
not restricted by the currently existing digital audio and 
video, however the quality is sacrificed. 25 
[0004] Otherwise, digital multimedia content, like 
digitally coded music in MPS format can currently be 
downloaded with subscription from the Internet and 
afterwards freely copied without loss of quality and addi- 
tional fees to the content owner. 30 

Invention 

[0005] It is an object of the present invention to dis- 
close a novel method for preventing illegal usage of mul- 35 
timedia content while preserving sufficient flexibility for 

the legitimate content user and an apparatus perform- 
ing such method. 

[0006] According to the invention, this object is 
achieved by means of the features specified in main 40 

claims. Advantageous designs and developments are 
specified in subclaims. 

[0007] With the advent of digital multimedia content 
distribution formats, including digital music, video or 
software, the unauthorized copying of multimedia con- 45 
tent items becomes more and more a problem from the 
perspective of the content author or rights owner. 
Restrictions on content accessibility are needed, how- 
ever, they should not be a nuisance to a legitimate 
owner of the rights to use such a content item. 50 
[0008] It is assumed that multimedia content in 
future will be stored on mass storage devices, or media 
servers, that become part of the home entertainment 
equipment. On the other hand, there will be mobile 
devices used for play back. A content descriptor associ- 55 
ated to each multimedia content item forms the basis for 
managing the use of content in a flexible manner from 
the perspective of the user, while still guaranteeing that 



any restrictions in the usage of the content are 
observed. Most notably, such content descriptors help 
to avoid unnecessary copying of the content item itself, 
by allowing to just move the right to use the content item 
from one device to another, instead of moving the com- 
plete multimedia content item, as detailed in this inven- 
tion. Moving of the rights means that the multimedia 
content item at its new location is now the legitimate 
original that may be played back and from which, for 
example, one further copy may be derived, if permitted 
by the associated rights. 

[0009] In a simple embodiment, this can be accom- 
plished by swapping the value of a flag indicating origi- 
nal or copy between the previous original and the new 
version of the item. In future digital systems with 
encrypted or partially encrypted content, this can be 
accomplished by the said content descriptor that 
describes the rights associated to a multimedia content 
item and that includes a location-specific decryption 
key. Advantageously, the original multimedia content 
item need not be deleted from the primary mass storage 
device, or media server, allowing for a temporary lease 
of play back rights to secondary, possibly mobile 
devices. 

[0010] Digital multimedia material, like audio, video, 
text, games, software, etc., will be available both on 
consumer electronics and computer platforms. The 

invention holds independent of the location of the item 
of multimedia content. It actually becomes more impor- 
tant in such a situation. 

Exemplary embodiments 

[001 1 ] Exemplary embodiments of the invention are 
explained in more detail in the following description. 
[0012] The invention proposes multimedia content 
items to be accompanied by content descriptors that 
specify the legitimate rights that are associated to the 
content item. Content descriptors can be associated to 
multimedia content items by referencing object or 
stream identifiers related to the content item in the con- 
tent descriptor. In order to make such an association 
unambiguous and to ensure that it cannot be easily bro- 
ken, advantageously a unique signature for a content 
item can be included in the content signal itself by 
means such as watermarking. The same signature can 
then be referenced in the content descriptor. The con- 
tent descriptor is considered not visible to the user and 
made tamper-proof by means of authentication. 
[0013] Such a secure tie between the content 
descriptor conveying the usage rights information and 
the content item itself allows to establish procedures, as 
claimed in this invention, to copy the actual multimedia 
content item freely while maintaining tight control over 
the ability to use it. This is specifically important when 
content items are frequently swapped between different 
storage and play back devices, for example, a media 
server located in the users' home and a portable player 
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device. Depending on tine storage size of the portable 
device, frequently played content need not be copied 
from the media server each time. As long as the item is 
still physically present on the portable device, only the 
usage license, which is a rather small amount of data, 5 
has to be swapped between the media server and the 
portable device. Hence, content that is only authorized 
for a limited number of concurrently existing copies can 
be used efficiently on multiple devices. 

[0014] The procedure to transfer a multimedia con- 10 

tent item and its associated usage rights, embedded in 
a content descriptor, from a primary storage device to a 
secondary device, possibly a player device, has to be 
tamper-proof. The following steps must be followed: 
First the multimedia content Item itself is copied to the 15 
secondary device, if it is not yet present there. Secondly, 
the content descriptor is copied to the secondary 
device. In case of encrypted or partially encrypted con- 
tent, this descriptor will contain the decryption key valid 
for the primary device. Thirdly, the content descriptor on 20 
the primary device is removed. Then, fourthly, a new 
decryption key for use of the multimedia content item on 
the secondary device is generated and inserted in the 
copied content descriptor. 

[0015] The said procedure advantageously 25 
assumes that decryption keys are valid only for a single 
storage device or a single player application. Therefor, 
the copied multimedia content item with the copied con- 
tent descriptor will not be playable on the secondary 
device before a new key has been generated. 30 
[0016] In that case the procedure is tamper-proof 
with respect to illicit duplication of licenses by interrup- 
tion of the procedure. 

[0017] Advantageously, this procedure is handled 
by a piece of trusted software or dedicated hardware. In 35 
order to further improve security of this procedure, a 
secure communication channel should be used 
between the devices, especially if the transaction 
occurs in a wide area network, such as the Inter-net. 
Optionally, the trusted software or dedicated hardware 40 
may as well establish a secure communication channel 
to a third party that authorizes the said procedure. After 
this procedure, the multimedia content item is physically 
present on both the primary and the secondary device. 
However, it is only playable on the secondary device 45 
until the license, in the form of the content descriptor, is 
given back to the primary device. 
[0018] Optionally, an additional license may be gen- 
erated, after payment of the applicable dues, to make 
the content on the primary device accessible independ- 50 
ent of the license that has been transfered to the sec- 
ondary device. Conversely, if the multimedia content 
item is no longer needed on the primary device, it can 
be physically deleted, since the secondary device now 
contains a copy that has all the rights previously associ- 55 
ated to the original version of the item. Specifically, this 
includes usage rights and the right to move the multime- 
dia content item to a further third device at any time. 



Usage rights might include the permission to generate 
one or more copies of the multimedia content item. 

[0019] Preferrably, the media server maintains a 
complete data base of multimedia content items at all 
times. The number of authorized playable copies from 
this data base may be controlled with the aforemen- 
tioned procedure. Each time a copy is made, the license 
data base of the server is updated appropriately. 
Depending on the status of the license information, it 
may not be possible to derive further copies. 
[0020] In a further preferred embodiment, the con- 
tent descriptor consists of a number of flags including 
an original/copy flag. The rights associated to the origi- 
nal include the permission to generate one digital copy 
of the content item, while no further copies may be gen- 
erated from a content item already marked as copy. 
[0021] Moving the rights of a multimedia content 
item in that case corresponds to the following proce- 
dure: Copy the item of multimedia content first with the 
original/copy flag set to indicate 'copy'. Then reset the 
original/copy flag in the original file to 'copy' status and 
set the original/copy flag in the new file to indicate 'orig- 
inal'. This is tamper-proof, since in case of power failure, 
etc. in the worst case both versions of the item will be 
labeled as copies. Optionally a verifying process can be 
invoked and, as a last step, the original item may be 
deleted if it is not retained as a copy. 
[0022] In a further preferred embodiment this pro- 
cedure can apply not only to multimedia contents but to 
software applications like multimedia-players, diction- 
ary, route-planner themselves. 

[0023] A content descriptor for multimedia content 
items contains at least one of the following elements: 

• A key for decryption 

• A cryption descriptor indicating the parts of the 
media file that are encrypted and the encryption 
scheme 

• A flag indicating the file is an original or a copy 
(orig/copy flag), 

• Copy bits for indicating the copy status, for exam- 
ple: CGMS bits and a copies-made counter 

• A media active bit indicating the media file is usable 
by the device 

Claims 

1. Method for preventing illegal usage of multimedia 
content stored on a primary mass storage device, 
characterised by that 

the multimedia content item is encrypted or 
partially encrypted, 

the multimedia content item is unambiguously 
labeled with a content descriptor, 
the content descriptor conveys the rights asso- 
ciated to the multimedia content item, 
the content descriptor conveys the cryption 
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keys associated to the multimedia content item, 

tine data concerning tine riglits to use eacli mul- 
timedia content item is moved from tine primary 
storage device to a secondary storage device 
by transfering botli the multimedia content item 5 
and the content descriptor without deleting the 
multimedia content item on the primary device. 

2. Method according to claim 1 , wherein only the con- 
tent descriptor is transfered from the primary device io 

to the secondary device if the multimedia content 
item is already present on the secondary device. 

3. IVIethod according to claim 1 , wherein unambiguous 
labeling of a multimedia content item with a content 15 
descriptor is achieved by an auxiliary authentication 
signal that is both inserted in the multimedia con- 
tent item and conveyed as part of the content 
descriptor. 

20 

4. Method according to claim 1 , wherein the cryption 
keys enable the use of a multimedia content item 
only at a given storage location and in conjunction 
with a specific instance of a multimedia player appli- 
cation. 25 

5. Method according to claim 1 or claim 2, wherein 
moving the data concerning the rights associated to 
a multimedia content item from the primary to a 
secondary device is done using a piece of trust- 30 
worthy software or dedicated hardware over a 
secure communication channel. 

6. Method according to claim 1 or claim 2, wherein 
after optionally copying of the multimedia content 35 
item, firstly the content descriptor is copied to the 
secondary device, secondly the content descriptor 
containing the decryption key for the original multi- 
media content item is removed from the primary 
device, and thirdly a new decryption key for use of 40 
the multimedia content item on the secondary 
device is generated and inserted in the copied con- 
tent descriptor. 

7. Method according to claim 6, wherein an additional 45 
decryption key is generated for the primary device 

on permit. 

8. Method according to claim 1, wherein the rights 
identification in the content descriptor is embodied 50 
by an original/copy indication, specifying the origi- 
nal version of the multimedia content as having 
unrestricted rights and the copy as having restricted 
rights. 

55 

9. Method according to any of claims 1 to 8, including: 

moving of the original version of an item of mul- 
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timedia content labeled with an original/copy 
indication from a primary storage device to a 
secondary device, by the steps of: 

copying the item with the original/copy indica- 
tion set to indicate a copy, 
resetting the original/copy indication in the orig- 
inal file to copy status and 
setting the original/copy indication in the new 
file to indicate original. 

10. Method according to any of claims 1 to 9, wherein a 
verifying process is invoked and in case of success- 
ful moving the multimedia content item from the first 
to the second storage device the previous original 
multimedia content item on the first storage device 
is deleted. 

11. Method according to any of claims 1 to 1 0, wherein, 
if moving of the multimedia content item is permit- 
ted, a move indicator in a user interface of the pri- 
mary or secondary storage device is enabled. 

12. Method according to claim 1, wherein the content 

descriptor is stored within a non-movable storage 
area of the source or receiving device. 

13. Method according to claim 1, wherein the content 

descripton contains one or more of the following 
elements: 

a key for decryption, 

a cryption descriptor indicating the parts of the 
item of multimedia content that are encrypted 
and the encryption scheme, 
a flag indicating the item of multimedia content 
is an original or a copy, 

a copy descriptor indicating the copy status 
and a copies-made counter, 
an item of multimedia content active descriptor 
indicating that the multimedia content item is 
usable by the source or receiving device. 

14. Method according to any of claim 1 to claim 5, 
wherein the said trust-worthy software or dedicated 
hardware optionally obtains authorization for the 
said process of moving the data concerning the 
rights associated to a multimedia content item from 
a third party over a secure communication channel. 

15. Aparatus for preventing illegal usage of multimedia 
content stored on a primary mass storage device, 
characterised by 

means for encrypting or partially encrypting the 
multimedia content item, 
means for unambiguously labeling the multi- 
media content item with a content descriptor 
conveying the rights and/or the cryption keys 
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associated to the multimedia content item, 

means of moving the data concerning the 
rights to use each multimedia content item from 
the primary storage device to a secondary stor- 
age device by transfering both the multimedia 5 
content item and the content descriptor without 
deleting the multimedia content item on the pri- 
mary device. 
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